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You are creating a Microsoft ASP.NET Web application that uses Web Parts. You need to 
ensure that users can modify the following attributes of a Web Part control on a Web page: 
Title 

Height and width 

Border 

Collapsed state 

The zone that contains the control 

Which code fragment should you add to the Web page? 


A. <asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:PropertyGridEditorPart [D="EditorPart1" runat="server" /> 
</ZoneTemplate></asp:EditorZone> 

B. <asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:AppearanceEditorPart [D="EditorPart1" runat="server"/> 
<asp:LayoutEditorPart ID="EditorPart2"runat="server" /> </ZoneTemplate> 
</asp:EditorZone> 

C. <asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:BehaviorEditorPart ID="EditorPart1" runat="server" /> 
<asp:LayoutEditorPart ID="EditorPart2"runat="server" /> </ZoneTemplate> 
</asp:EditorZone> 

D. <asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:AppearanceEditorPart [D="EditorPart1" runat="server"/> 
<asp:BehaviorEditorPart [D="EditorPart2"runat="server" /> </ZoneTemplate> 
</asp:EditorZone> 


Answer: B 


QUESTION: 150 

You are creating a Microsoft ASP.NET Web application that uses Web Parts. You need to 
ensure that users can modify the properties of Web Part controls. You also need to ensure that 
modifications are persisted. What should you do? 


A. ‘Apply the [Personalizable(false)] and [WebBrowsable(false)] attributes to the public 
properties of the www.dump4certs.com control. 

Add the following code fragment to the Web page. 

<asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:PropertyGridEditorPart [D="EditorPart1" runat="server" /> 
</ZoneTemplate></asp:EditorZone> 

B. -Apply the [Personalizable(true)] and [WebBrowsable(true)] attributes to the public 
properties of the control. Add the following code fragment to the Web page. 

<asp:EditorZone ID="EditorZone1" runat="server"> 
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<ZoneTemplate><asp:BehaviorEditorPart ID="EditorPart1" runat="server" /> 
</ZoneTemplate> 

</asp:EditorZone> 

C. -Apply the [Personalizable(true)] and [WebBrowsable(true)] attributes to the public 
properties of the control. 

Add the following code fragment to the Web page. 

<asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:PropertyGridEditorPart ID="EditorPart1" runat="server" /> 
</ZoneTemplate></asp:EditorZone> 

D. -Apply the [Personalizable(false)] and [WebBrowsable(false)] attributes to the public 
properties of the control. Add the following code fragment to the Web page. 

<asp:EditorZone ID="EditorZone1" runat="server"> 
<ZoneTemplate><asp:BehaviorEditorPart ID="EditorPart1" runat="server" /> 
</ZoneTemplate> 

</asp:EditorZone> 


Answer: C 


QUESTION: 151 

You are creating a Microsoft ASP.NET Web site. You need to ensure that anonymous users are 
able to personalize the Web site. Which code fragment should you add to the Web.config file 
of the Web site? 


A. <authorization> 

<allow users="*"/> 

</authorization> 

B. <authorization> 

<allow users="?"/> 

</authorization> 

C. <anonymousldentification enabled="true" 
/> 

D. <authorization> 

<allow users="?"/> 

</authorization> 
<anonymousldentification enabled="false" 
/> 


Answer: C 


QUESTION: 152 
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You are creating a Microsoft ASP.NET Web site. You need to ensure that the Web site uses 
cookieless authentication. Which code fragment should you add to the Web.config file of the 
Web site? 


A. <httpCookies httpOnlyCookies="false"requireSSL="false" 

domain="" /> 

B. <sessionStatemode="SQL Server" cookieless="true" 

sqlConnectionString=" Integrated Security=SSPI;data source=MySq|Server;" 
sqlCommandTimeout="10" /> 

C. <anonymousldentificationenabled="true"cookieless="AutoDetect"/> D. <authentication 
mode="Forms"> 
<formsloginUrl="/login.aspx"cookieless="UseUri"defaultUrl="myCustomLogin.aspx"> 
</forms></authentication> 


Answer: D 


QUESTION: 153 

You are creating a Microsoft ASP.NET Web site. You need to retrieve a list of all the roles that 
a logged-in user is a member of. Which two methods should you use? (Each correct answer 
presents a complete solution. Choose two.) 


A. Roles.FindUsersInRole 
B. User.GetRoles 

C. Roles.GetAllRoles 

D. Roles.GetRolesForUser 
E. Roles.IsUserInRole 


Answer: B, D 


QUESTION: 154 
You are creating a Microsoft ASP.NET Web site. You need to store authorization-related 
information on each user's client computer. Which code fragment should you use? 


A. <httpCookies httpOnlyCookies="true" 
requireSSL="true" 

domain="" /> 

B. <sessionState cookieless="false" 
</sessionState> 


TI: 


C. <roleManager enabled="true" 
cacheRolesInCookie="true"> 
</roleManager> 

D. <caching> 

<outputCache enableOutputCache = "true"> 
</outputCache> 

</caching> 


Answer: C 


QUESTION: 155 

You are creating a Microsoft ASP.NET Web site. You need to ensure that file system security 
permissions can be used to restrict each user's individual access to Web pages. Which code 
fragment should you use? 


A. <authentication mode="Windows"> 
</authentication> 

B. <authentication mode="Windows"> 
</authentication> 

<identity impersonate="true"/> 

C. <authentication mode="Forms"> 
</authentication> 

<authorization> 

<deny users="?"/> 

</authorization> 

D. <authentication mode="Forms"> 
</authentication> 

<authorization> 

<deny users="?"/> 

</authorization> 

<identity impersonate="true"/> 


Answer: B 


QUESTION: 156 

You are creating a Microsoft ASP.NET Web site. The Web site includes user management 
pages. The pages are stored in a folder named UserMgt in the root folder of the Web site. You 
need to ensure that only users who belong to the administrator role can access the pages. What 
should you do? 
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A. Add the following code fragment to the Web.config file in the root folder. 
<configuration> 

<location path="UserMgt"> 
<system.web> 
<authorization> 

<deny users="*"/> 

<allow roles="admin"/> 
</authorization> 
</system.web> 

</location> 
</configuration> 

B. Add the following code fragment to the Web.config file in the root folder. 
<configuration> 

<location path="UserMgt"> 
<system.web> 
<authorization> 

<allow roles="admin"/> 
<deny users="*"/> 
</authorization> 
</system.web> 

</location> 
</configuration> 

C. Add the following code fragment to the Web.config file in the root folder. 
<configuration> 

<location path="UserMgt"> 
<system.web> 
<authorization> 

<allow users="admin"/> 
<deny users="*"/> 
</authorization> 
</system.web> 

</location> 
</configuration> 

D. Add the following code fragment to the Web.config file in the UserMgt folder. 
<configuration> 

<location path="UserMgt"> 
<system.web> 
<authorization> 

<deny users="*"/> 

<allow roles="admin"/> 
</authorization> 
</system.web> 

</location> 
</configuration> 
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Answer: B 


QUESTION: 157 

You are creating a Microsoft ASP.NET Web site. The Web site includes an administration 
page named admin.aspx. You need to ensure that only the user named Marc can access the 
page. Which code fragment should you use? 


A. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow role="Marc"/> 

<deny users="?"/> 
</authorization> 
</system.web> 

</location> 

</configuration> 

B. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow users="Marc"/> 

<deny users="?"/> 
</authorization> 
</system.web> 

</location> 

</configuration> 

C. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow users="Marc"/> 

<deny users="*"/> 
</authorization> 
</system.web> 
www.dump4certs.com 
</location> 

</configuration> 

D. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<deny users="*"/> 

<allow users="Marc"/> 
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</authorization> 
</system.web> 
</location> 
</configuration> 


Answer: C 


QUESTION: 158 

You have a Microsoft ASP.NET Web application. The application runs in a shared Internet 
Information Services (IIS) application pool. The application retrieves data from an XML file. 
A Windows domain account named Contoso\Maria has access to the file. You need to ensure 
that the application uses Contoso\Maria to access the file. You also need to configure 
impersonation only for the Web application. What should you do? 


A. Configure the IIS application pool to use the Contoso\Maria identity. 

B. Add the following code fragment to the Web.config file. 

<identity impersonate="true" userName="Contoso\Maria" password="secure password" 
/> 

C. Add the following code fragment to the Web.config file. 


<processModel user Name="Contoso\Maria" password="secure password" 
comImpersonationLevel="Impersonate" 

/> 

D. Add the following code fragment to the Machine.config file. 

<processModel user Name="Contoso\Maria" password="secure password" 
comImpersonationLevel="Impersonate" 

/> 

Answer: B 


QUESTION: 159 

You are creating a Microsoft ASP.NET Web site. The Web site aggregates data from various 
data stores for each employee. The data stores have security access configured for each 
employee based on their identity. You need to ensure that employees can access the data stores 
by using the Web site. Which code fragment should you add to the Web.config file? 


A. <authentication mode="Windows'"> 
<forms> 


</forms> 
</authentication> 


81 


<identity impersonate="false" /> 
B. <authentication mode="Forms"> 
<forms> 


</forms> 

</authentication> 

<authorization> 

<allow users="?" /> 

</authorization> 

C. <authentication mode="Windows"> 
<forms> 


</forms> 

</authentication> 

<authorization> 

<deny users="?" /> 
</authorization> 

<identity impersonate="true" /> 

D. <authentication mode="Forms"> 


<forms> 

</forms> 
</authentication> 
<authorization> 
<allow users="*" /> 
</authorization> 
Answer: C 


QUESTION: 160 

You have a Microsoft ASP.NET Web site that connects to a Microsoft SQL Server database. 
You configure the database to allow only trusted connections. The Web site uses Windows 
Authentication to authenticate all users. You create a new domain account named dbUser that 
has access to the database. You need to ensure that the Web site can access the database 
without allowing each individual user to access the database. What should you do? 


A. Grant the Public database role access to the database. 

B. Use the anonymous account when you access the database. 

C. Impersonate the dbUser account when you access the database. 

D. Modify the connection string in the Web.config file to use the dbUser account. 


Answer: C 
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QUESTION: 161 

You create a Microsoft ASP.NET Web site. The SqlProvider configuration of the Web.config 
file contains the following code fragment. 

<membership defaultProvider="SqlProvider" userlsOnlineTimeWindow="15"> 

<providers> 

<clear /> 

<add name="SqlProvider" type-"System.Web.Security.SglMembershipProvider" 
connectionStringName—"MySdglGonnection" applicationNames"MyApplication" /> 
</providers> 

</membership> 

You need to ensure that the Web site can store passwords securely. You also need to ensure 
that passwords can be retrieved. Which code fragment should you add to the Web.config file? 


A. passwordFormat="Hashed" enablePasswordReset="true" requiresQUESTION 
NO:AndAnswer="false" 
B. passwordFormat="Encrypted" enablePasswordReset="true" requiresQUESTION 
NO:AndAnswer="true" 
C. passwordFormat="Encrypted" enablePasswordRetrieval="true" requiresQUESTION 
NO:AndAnswer="true" 
D. passwordFormat="Clear" enablePasswordRetrieval="true" requiresQUESTION 
NO:AndAnswer="true" 


Answer: C 
QUESTION: 162 


You create a Web site to use a Microsoft ASP.NET membership provider. You create the 
following roles: 


Admin, Manager, and Employee. 

The Web page contains the following code fragment. 
<asp:LoginView id="LoginView1" runat="server"> 
<RoleGroups> 

<asp:RoleGroup Roles="Admin"> 
<ContentTemplate> 

You are logged in as an administrator. 
</ContentTemplate> 

</asp:RoleGroup> 

</RoleGroups> 

</asp:LoginView 
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You need to display a message to authenticated users even if a RoleGroup has not been defined 
for their role. Which code fragment should you add to the LoginView control? 


A. <AnonymousTemplate> Welcome! 
</AnonymousTemplate> 

B. <LoggedInTemplate> Welcome! 
</LoggedInTemplate> 

C. <asp:RoleGroup Roles="User"> 
<ContentTemplate> Welcome! 
</ContentTemplate> 
</asp:RoleGroup> 

D. <asp:RoleGroup Roles="Default"> 
<ContentTemplate> Welcome! 
</ContentTemplate> 
</asp:RoleGroup> 


Answer: B 
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